Owning the Data Center Using Cisco NX-OS
Explore vulnerabilities in Cisco NX-OS, including hidden strings, GDB usage, and potential exploits. Learn about security risks and implications for data center management.
Tools of the Trade for a Modern CISO
Explore essential tools and strategies for modern CISOs, covering organizational roles, security frameworks, risk assessment, and effective communication in evolving cybersecurity landscapes.
Rapid Risk Assessment
Learn rapid risk assessment techniques for effective cybersecurity governance. Explore risk definitions, analysis methods, and real-world case studies to enhance your organization's security posture.
The Truth About Outsourcing Security
Explore the realities of outsourcing security, including approaches, stages, challenges, and strategies for success in this insightful presentation by Bryan Fite.
.NET Access Control Service
Explore .NET Access Control Service for token-based authentication, federation, and secure resource access in Windows Azure environments.
Virtual Firewalls - The Good, the Bad and the Ugly
Explore virtual firewalls' advantages, drawbacks, and implementation challenges in cloud environments, covering performance, hardware, and configuration management considerations.
Alfred, Find the Attacker - A Primer on AI and ML Applications in the IT Security Domain
Explore AI and ML applications in IT security, covering classification, outlier detection, and user behavior analysis for enhanced protection and threat detection.
Dark Clouds Ahead - Attacking a Cloud Foundry Implementation
Explore vulnerabilities in Cloud Foundry implementations, focusing on SAP HANA XS Advanced. Learn about components, concepts, and potential security risks in cloud platforms.
SAP Bugs - The Phantom Security
Explore SAP security vulnerabilities, including directory traversal and secure storage issues, with insights on potential risks and mitigation strategies.
Samsung Pay Tokenized Numbers, Flaws and Issues
Explore Samsung Pay's tokenization, security flaws, and potential vulnerabilities in offline mode. Learn about token expiration, social engineering risks, and real-time attack scenarios.
How to Implement an SDL in a Large Company
Learn to implement a Secure Development Lifecycle in large organizations, covering change management, coding guidelines, security tools, and review processes. Gain insights from Bosch's experience and best practices.
An Unknown SAP Default Account
Explore SAP default accounts, their creation, risks, and security implications. Learn about exploits, system users, and solutions to enhance SAP system security.
Caring for File Formats
Learn about file format security, preservation challenges, and the growing problem of digital content vulnerabilities in this insightful talk on digital preservation.
HoneySAP - Who Really Wants Your Money
Explore HoneySAP, a honeypot system for SAP environments. Learn about its goals, components, and implementation to enhance security and gather threat intelligence.
Game Over, Does the CISO Get an Extra Life
Explore CISO challenges, attack surfaces, and security strategies in this talk on navigating the complex landscape of cybersecurity leadership and risk management.
The Foundation Is Rotting and the Basement Is Flooding
Explore critical vulnerabilities in computing foundations and their impact on security. Learn about technical debt, low-level attacks, and strategies to address information security challenges.
I Know What You Coded Last Summer
Explore SAP system security, custom code risks, and best practices for protecting critical business systems in this comprehensive overview.
Hitting the Gym - The Anatomy of a Killer Workout
Explore security vulnerabilities in smart fitness equipment, focusing on treadmills. Learn about potential risks, attack surfaces, and implications for both users and corporate environments.
Developing and Managing an OWASP Project - Projects 101
Learn to create, manage, and grow an OWASP project. Explore naming, sponsorship, levels, services, and resources for successful open-source security initiatives.
Writing Policies That Aren't Miserable for Everyone Involved
Innovative approach to creating effective security policies that are easy to understand, implement, and comply with, improving overall organizational security and employee engagement.
A Stratagem on Strategy - Rolling Testing into Product Testing
Explore integrating security testing into product testing strategies, enhancing coverage and aligning security with software requirements for more effective quality assurance in the SDLC.